Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: QXWfYvraG+1CSZ21nyKXgF86gUmupvUbN8QNQHSTTnI=
Subject key identifier: EB:EB:F1:AC:D3:90:2B:DF:CB:26:DD:44:F9:A7:40:27:0C:DB:BE:1F
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019D9AE31BCCA53CFD4424C170F44CF7AA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 153A
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: wjI4wmGFYBAHeA9L/grSZLO1TfVFdjcL1jnpM2rTYZs=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1b:cc:a5:3c:fd:44:24:c1:70:f4:4c:f7:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=ebebf1acd3902bdfcb26dd44f9a740270cdbbe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:6d:72:c9:0a:13:60:55:43:b4:d1:2e:10:
01:17:0c:d0:36:09:bb:37:7c:b8:82:ca:51:f1:8a:
86:5e:3c:20:8b:d4:e2:a2:7f:d3:7f:85:65:9d:af:
93:ee:af:fa:3e:9b:6b:68:49:fc:8c:8e:e7:12:69:
54:f0:53:5f:7c:3c:0f:04:7c:c0:c8:b4:06:24:15:
92:55:74:d1:b1:b8:f8:04:55:e4:9c:36:d9:78:75:
9a:8c:22:5b:c9:3b:c8:52:86:80:6b:0c:d6:54:95:
25:24:98:d0:2d:4d:c6:d4:7b:47:26:e3:38:62:42:
90:b4:04:4e:d4:a6:18:06:0e:ae:24:05:cd:fc:53:
1f:4c:a4:63:53:fa:34:59:ce:3c:90:4e:f5:ae:4c:
f7:6a:fd:c5:e8:c4:d7:8a:6d:e0:42:82:43:76:e4:
7f:e8:1f:15:05:4f:21:c3:90:74:65:53:e8:e5:9e:
92:3f:8b:f7:40:e0:fa:e3:5b:f2:e1:d2:4f:56:cf:
db:5a:25:d2:49:c9:76:d8:21:4f:83:2d:bb:85:c7:
31:6d:d8:eb:af:ef:f4:75:47:df:56:8e:42:b0:20:
ff:2f:d4:24:94:b6:cc:1b:b9:f1:5a:4c:f9:bb:27:
a1:70:18:78:65:06:ea:21:b2:ef:7c:2b:63:ab:15:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EB:F1:AC:D3:90:2B:DF:CB:26:DD:44:F9:A7:40:27:0C:DB:BE:1F
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:fe:4d:5d:93:27:7c:68:10:3f:13:88:64:50:67:c1:77:
a6:76:57:60:8b:8a:d6:bf:39:0c:ef:4c:a1:ad:71:60:c1:8e:
9f:c6:e9:13:4b:fc:86:72:19:51:78:19:3b:a6:9c:91:49:ed:
e5:75:89:69:ec:e0:ae:40:6c:e7:e4:5b:d0:47:bc:a6:bf:3e:
1a:0b:c3:eb:ee:83:2f:72:61:8a:7c:e3:ac:3c:1c:b0:17:01:
de:8b:72:bc:95:8c:8e:f4:67:0a:27:d4:3c:c8:89:e3:d1:6a:
74:af:df:df:8d:7c:0e:5d:1d:07:ff:3a:c5:b2:1b:1a:d9:b6:
b8:fd:47:dc:90:82:a7:9e:fa:24:d9:7f:84:d2:56:7d:15:40:
1f:e7:33:88:44:c1:bb:86:87:9b:bc:5f:d7:b0:fb:9b:ae:24:
0c:d6:11:c2:48:5e:54:55:bb:9f:98:d1:9b:72:db:22:5f:5e:
2e:51:dd:c4:d1:13:4c:48:19:b6:11:f1:fa:a5:b1:ba:fd:98:
10:94:8b:9c:72:c3:c5:57:b3:e5:fa:72:af:e1:be:da:4d:e4:
49:89:7c:6a:66:7d:9f:aa:e3:38:90:c4:1c:40:e3:85:7e:18:
77:79:78:51:7f:d9:21:ff:6a:4e:e4:f4:78:30:53:b2:58:4f:
9d:6e:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:45 2026 by rpki-client